How severe is CVE-2018-5508?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in F5 Big-Ip Policy Enforcement Manager

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option.

EPSS: 0.009 (54.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

F5 Big-ip_policy_enforcement_manager — versions 11.2.1, 13.0.0
F5 Networks, Inc. Big-ip (Pem) — versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2

References

f5sirt@f5.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-5508?: CVE-2018-5508 is a medium-severity vulnerability in F5 Big-Ip Policy Enforcement Manager. CVSS score: 5.9/10. Published 2018-04-13.
How severe is CVE-2018-5508?: Medium severity. CVSS v3 base score is 5.9 out of 10.